if you can provide me a better way to keep my homelab from getting DDoSed every five minutes then by all means, please share it
Just put it behind a wireguard server and don’t expose any ports?
If you absolutely must expose some stuff, get a cheap 3$/mo vps that connects via wireguard to your home and setup a reverse proxy? They almost all come with DDoS protection.
How do I stop a DDOS attack of my website without having port 80 or 443 open, so you can access the website?
Don’t expose the website. That’s the point. Only connect remotely via wireguard.
If you must expose the website, I also provided options in my original post.
I think you misunderstood; if I run a publicly accessible website (like a Lemmy instance), those ports need to be opened.
Alright who actually ARE cloudflare? I’m seeing them on every website but idk who they are
I deadass got a cloudflare error after reopening this post:

cloudflare ddos protection is cetralization?
About 20% of global traffic is routed through Cloudflare so unfortunately Cloudflare is very much a massive case of centralization.
A Cloudflare outage would affect a huge number of websites and services and they have some degree of control over the way you host your and use their services.
Yeah, did people forget the last big Cloudflare outage already? A good chunk of all big services went down simultaneously. Discord, Amazon, Twitter and even the PS and Xbox consoles networks lmao.
Yes, use a competitor at least.
Though I’m not a big fan of centralization, I use cloudflare. Their DDoS protection is unmatched, they have scraping protection, and just in case they decide to screw their users over, switching to another service is trivial.
I don’t know what cloud flare is and at this point im afraid to ask
Basically they work as a bouncer in front of your website and stop all the undesirables getting in. I.e. AI scrapers. Also if somebody decides they want to try and hack you or otherwise cause problems the bouncer beats them up and you never have to hear about it.
If you use a VPN the bouncer is very suspicious of you and you have to jump through all sorts of hoops to get in, which is why some people don’t like websites using it. Unfortunately there isn’t really a solution since there are a lot of illegitimate uses for having a VPN connection as well, so you have to be suspicious of them.
Ah, thanks, I was wondering this too. What shady stuff are they up to?
Well mostly it’s AI scrapers at the moment (I wouldn’t mind as much if they just chilled out, but it’s like hundreds of connection attempts per second).
The other thing is DDoS which I don’t really have to deal with, but it’s nice to have just in case.
No I mean what shady stuff are Cloudflare up to?





